$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AFDE92321F5A11F0BA7E6961C4F9AE02.roa File: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (raw, json) Hash identifier: HTPiaILHx610R5z37gv24ekM7g7UkbBXP+NBEjTo5BI= Subject key identifier: BA:9E:4D:FD:25:82:C0:1B:4F:44:24:B4:CC:9B:BD:2B:22:E4:1F:E4 Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 045B Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AFDE92321F5A11F0BA7E6961C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:30:59 +0000 ROA not before: Wed 31 Dec 2025 00:19:47 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 34927 IP address blocks: 2400:16e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 23:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Dec 31 00:19:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a477d3-f117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:90:66:9e:8b:0f:b3:ef:cf:d3:bc:cb:05: 5a:02:06:45:0f:ec:84:52:61:9c:09:de:36:4f:d0: bf:99:ff:60:03:9e:98:45:d6:ac:7e:85:da:29:a4: e9:28:69:0c:4a:d5:5a:16:16:88:9f:b8:b3:17:f2: bd:50:66:6c:3a:d6:dd:61:8f:f9:65:c9:7f:94:1b: 9f:b5:89:8f:9e:ea:7b:2c:93:80:11:f5:7c:d2:ee: ce:39:2b:72:b6:d0:df:7e:66:40:63:1d:0f:24:c3: 2a:26:bf:17:1e:b6:43:27:f7:b6:31:6d:66:71:95: d2:b6:75:3e:93:c9:12:cd:a5:c5:9f:1d:34:4f:7f: 95:aa:d4:dc:80:23:5c:ba:59:6e:f3:5a:2a:c3:99: 26:d5:e1:77:e5:a1:37:3f:73:35:6e:02:a0:fd:1b: 4c:d0:d7:d0:e2:6f:09:e6:e2:b0:df:bb:98:75:b4: 1d:01:f8:b9:3d:8f:10:c0:1a:9a:21:03:7c:a3:85: 9f:cb:45:23:08:7a:d8:fa:5a:e1:f6:3c:2c:6d:e5: ab:af:3c:df:ed:5c:d5:e5:af:29:91:0a:3e:0b:f6: 2c:1e:38:7c:7e:f9:1a:7a:b1:3b:2d:a9:08:4b:ae: 6b:a4:b8:d0:b8:d5:48:c5:80:61:aa:92:fe:65:14: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9E:4D:FD:25:82:C0:1B:4F:44:24:B4:CC:9B:BD:2B:22:E4:1F:E4 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AFDE92321F5A11F0BA7E6961C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:16e0::/48 Signature Algorithm: sha256WithRSAEncryption 59:82:d2:1e:ba:31:e5:64:85:04:32:6c:b9:fe:07:68:76:73: e3:bc:f4:b6:a0:00:d9:a8:a6:de:14:52:80:ec:f2:88:71:39: 74:61:9e:c1:a2:5d:20:cc:67:1a:fa:a9:3e:53:dc:c7:a3:79: ed:0f:78:59:47:02:62:e6:5e:a0:b7:8c:cb:98:71:b5:d6:9e: ff:7a:60:c0:fe:17:a9:43:fe:38:d0:c2:58:7d:f0:87:10:cc: 60:a2:1b:bf:aa:22:ba:d5:5c:bc:9c:95:14:53:a9:78:14:1d: d0:1d:46:4a:df:5e:61:21:99:ba:73:c4:d0:7a:47:b9:bf:42: 19:78:72:ec:44:d3:66:c5:7e:84:e6:aa:ed:f5:87:5b:b8:f2: e2:0d:58:7b:9c:40:d6:ff:6e:49:5d:da:d3:f7:27:9c:ec:e4: fb:2f:fe:69:cb:16:a9:d8:68:80:5a:93:36:6e:5f:64:fc:ef: d0:eb:21:7e:60:c7:87:42:ff:47:69:11:f1:a5:82:a9:00:5b: fb:f9:94:ba:95:ff:6c:f3:81:b8:94:8f:d4:d6:87:6a:46:11: 05:dd:09:c8:5c:67:96:4c:3a:bb:32:6d:09:ac:e2:bc:9f:d0: 88:4a:43:c2:28:25:27:24:95:6f:57:db:86:4e:95:9d:06:5f: fb:85:04:0d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUxMjMxMDAxOTQ3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzdkMy1mMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVeQZp6LD7Pvz9O8ywVaAgZFD+yEUmGcCd42T9C/mf9gA56YRdasfoXaKaTp KGkMStVaFhaIn7izF/K9UGZsOtbdYY/5Zcl/lBuftYmPnup7LJOAEfV80u7OOSty ttDffmZAYx0PJMMqJr8XHrZDJ/e2MW1mcZXStnU+k8kSzaXFnx00T3+VqtTcgCNc ullu81oqw5km1eF35aE3P3M1bgKg/RtM0NfQ4m8J5uKw37uYdbQdAfi5PY8QwBqa IQN8o4Wfy0UjCHrY+lrh9jwsbeWrrzzf7VzV5a8pkQo+C/YsHjh8fvkaerE7LakI S65rpLjQuNVIxYBhqpL+ZRTopQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFLqeTf0l gsAbT0QktMybvSsi5B/kMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4QzkvNDBFMEMwRUU5MzZDMTFFQ0JEQzExQTIwQzRGOUFFMDIvQUZERTkyMzIx RjVBMTFGMEJBN0U2OTYxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAAW4AAAMA0GCSqGSIb3DQEBCwUAA4IBAQBZgtIeujHlZIUEMmy5 /gdodnPjvPS2oADZqKbeFFKA7PKIcTl0YZ7Bol0gzGca+qk+U9zHo3ntD3hZRwJi 5l6gt4zLmHG11p7/emDA/hepQ/440MJYffCHEMxgohu/qiK61Vy8nJUUU6l4FB3Q HUZK315hIZm6c8TQeke5v0IZeHLsRNNmxX6E5qrt9YdbuPLiDVh7nEDW/25JXdrT 9yec7OT7L/5pyxap2GiAWpM2bl9k/O/Q6yF+YMeHQv9HaRHxpYKpAFv7+ZS6lf9s 84G4lI/U1odqRhEF3QnIXGeWTDq7Mm0JrOK8n9CISkPCKCUnJJVvV9uGTpWdBl/7 hQQN -----END CERTIFICATE-----Generated at Fri Mar 13 09:56:44 2026 by rpki-client